Cisco Nexus 5020p Switch vulnerabilities

4 CVEs affecting Cisco Nexus 5020p Switch, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3341, published 2014-08-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3341, published 2014-08-19. Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days. The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows…
CVE-2013-1192, published 2013-04-25. High severity, CVSS 9.3. EPSS: 2.4% chance of exploitation in the next 30 days. The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows…
CVE-2014-3261, published 2014-05-26. High severity, CVSS 7.6. EPSS: 2% chance of exploitation in the next 30 days. Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on Nexus 3000 devices,…
CVE-2011-4023, published 2012-05-03. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumption) via SNMP requests, aka Bug ID CSCtr65682.